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#}ftx£C£4>^t?) #oJffc-C. I, 

□ y ^ a -c**»ii9PS8i«:»w 

#*lftilPlfig&^:jfj%14y*tJ (ROMB 1 4) icmt 

&tsWM>mtzm : T aimtmmvm&m o< v 3 > 3 

0. ECU 1 0) £*RWS. 
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u r Btrtetf- - ; < - <b aft oifigr * o . -'<-*> 6 
a*Stc*t OTBMW:7a i/^ Aft #8?: as&^m^-s 

m&v - >* -frzmm s n 6 srsBMffli if =? awir* 
Sfs 0fcl»3aWt>P:/o ?7 AflMUfclJEBfje©.* * >) x 

7J £ n/c!2iE1*$R4^&$*g$iJ@ilSiiJ©iatt^iaK:S 
ft/cIgaEWfR©^- 2 . A# 3 tifcBSE 
t*tt©KB£«i8*2«T 0 . C ©M^i8lg©i|gm*i t^W 
-C&£*I£tt:©^. WIE»ji«f¥«:«ffriCi*1S« 
if -SfMtJS 1 7bM3©f5in*^IB4S©mtK»«g© 
M/B^x^A. 

[«*Ji5] mriaam«ia^©», 

Bff Iff *©A2>#8*flU . 

EA**S*>?.©BiEtl»«©A**flWB#Ccs* l/. A 
WO. 

B«iB13IiEt«$fi£S<I 0 . ^feBMlB-9"- 0H©iEtt*K 
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2 

H«$g©JJBi&?tI££S!fTU C©M^S1B©^^h^ 
S<rC&£t§^C©«2K BufBil{fMS^e^©Biiia*fl'(aJ7" 

m.4 omnfrfczmsDmm^&mto&mis*^ a„ 
mias&stift^jigtc. ^tHJBfria#jAS&^K:*j^T. * 
©a w«$r* wfiaif w-c-cc a t&gm-r z,m&*^i o . 

io jtufB-y--^-iS. 

^At»$8©^^mfiaB*W$R«:*tJ^-r-5*iJai^ci 
t»#R©*(c-Q^r. BtrfaaMMa^^iiM^tf^c 

m^m 7 ] fjtamisiij^s©»*ifj^^a a 

iS**iJD^oy^Ai*s. BUlBMfg^a^KJ:^* 

y x y rK5E» 05 c i ^^®<!:-r-s»*w 1 « 
20 M6©^jn^(ciEtg©^ts*u®iis©affl->^'r-A 0 

©«fflK^fliSti4*(lffli^n-y-7AtS$g*. SSttfjicS 

t«ss©«»g*Uffliiiai«Mniffe«:»fi£sn. aflNB*^- 
ursft LrMfatatt^©^©^ ■=& x y 

30 [m^69] ^mmmmgimvmmic&mstizm 

a<iii ; Sr/M,-cti«$nr^-2>Buia$ij®)'7'D ^7 At»$g 
y x y r {c»#iitr»ajftf|p**ff 5I*S;M«Hfa 

[0 00 1 ] 

[#Pj©jST£&fi5#HF] *«Wa«s«©«l 
[0 00 2] 

ifi¥. 4fig«im^©$iag«:*f*£$ns 

c-^-f > K^s^^-A. x>>>>$ir(a)£xxf-A)ii) 

^ 3 > <t l » ^ ) ^ffl l 7* d if =7 J*fflWCfi t>ti Z> J: -5 
-fit. cwi^&^a^vAfil®** 

50 ^«g*»H!iftfe©) (Dft-zmwyvifvAtemms*') 



C3) 

3 

iLtfAtteD. HlfieROM«:«ROM7 -i % ft:£*£ 

D n D iLT^A3nti,>/c. f^3tt?dM@J7'P^ 

jSRffg&ft («^^.«. KTrtgBft:£*©A9&A,/c<ag) 
*5 6«tS*lJfflffilB**fiE-ri*«fflI^-f h (ECU) £ 

[0 00 3] 

^© ^©^teSflCHft-Cfc £ <!; fflH#& o fc. 
£<,>5©&*. *W©-&t8g-^*7-A#K$lfi{l:UTiW 

^£*Mg^bTi>£{c4>#>*>>fc6-r. *sa<*©gfi 

^WS© 3 6ft: 4JI*Kt<D«ftl*» 6 . mi&$'J®£lg©PS 

^f^©ffl*#wB#.^s-c(c. mm^tuf^Aoymm^ 

ftr*>\ fiKWW^n A©ttBEfHII**+^K:Saf L- 
ftr^r-JrtAUWaJT'P if? a©^' ^(c«fc £ h ~> ;7\«u# 

h:£&£ii!fi£bfc<fc -5 £<<> ->tclt>A,£ -5 ft:f£ 

i*^*(«l>t^ £ ft: 0 v iS^K iot »JE^tl 
it -> riSS u ftwhttttftf. C S 

mm^-tiV-A h'ibtlt a— if 
— ^-trx©SI*>6. $;fcl8-£±#>6€>. VZ2>?c» 30 
«4KiOTSaftDtttt$£&a< t>fct> (Sr*jE$£PH»&m 

©aft* 5 6 . C ©SMtc k+^/L 6 ti&O i «,» ^ WH 

[0 004] fcfe. WBB 5 F4 - 2 4 6 7 3 O^fg, # 

gg^3 - 2 7 o 6 0 5ffi«. - 9 1 0 

0 9#&»Ktt. ^- KW«c^fiSt«8«:**mmWffli* 

7 - o^7A5i*MswspiS5nri-^. cn6 40 

Ka*ftWfc»«: . ^iS»^g*3S^-T 4 C £ ft: 

/c 0 . » JEt&omw -fv v ? a icw$t&z.tc 0 -r s c t 

&B]mtte2>o C<Dtc&>. #6^^?JI©tr$^©ffl^^W 
^f.#.-c«. Vfcf&oftV&y'uy? a. gtt,^*-€-©B$*-c 
^gS/jNpg(OS^tl©^*WT -SfiJiai^a ^ A£§ 
*i£A,-Cfct. mtf*M^-#a>6*M*ton5bfcf£ 
«c. -f 7-cctec^rSg7BP8^ii:B«{c^fiS©*il1Si7"a 
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4 

#7 i»<D§n&mm znmtmcmm u 3 6 cc^tssnspg 

g©tt«jft££ «fc 0 ftftMKIHKKc? SCt *f5j^£ ft: 
[0 00 5] UfrV. IMLtc^mcm^titciyXf 

a«. ^-rn*>. fij©7 - D^A^ii«Ts/c«?>©^ 

ft:3£g (fllxtf, $iS*iJffll«g©tS@K:fc;c/c$i|®^P 
d'5A££f!$rr£:3>b-^-*i'X7-A) £*$g*ir$JJS 
gcc*fL-rp-*^«cg^-r-Sfe©-c*-5/ce*. 

aisg©fi]®^D if? Aom^^^wt^^n^M 
m (wu*. -en 

•Pti±SBl#3*a»«*flliL 6ft: t» £ l» ^SBf 

A^So *M©Htt3.— tf*. Jtt&*Ut3P£lg©3HJ 

isi^'ay^AwiftiE-^igSfofciit)^. <&-r t^-*--?-^ 

{cttifr^ft^i^Wft:^ MM^^-f 
Cc^^ftriiitH^ftrii) £t,>5fSJJ^&&-5. 5 
t. -®3.--!f*5. ^^-^-^cctorai^ft:^^. §6 
$U®7*Pi'^A©ftiE^II»f ; S:^«ClEDr (ig^iCfc 

/c±-c) ft *> c t *s-e* £ <t . j.— tr ©fiJMt4*^s 
•s. L-^b. Buie^ov-xr-A©^. -e©fc*fc 
«, -«a-ir *5*fliS)7-D At»$R^S«-r s^ft: 

^g(^ftt<<tt. mw?a>/7 2*mmz&mLtc.2EW. 

as. grc -as^— »f*i$ij®^P^vAt&$R 
^a^-rsss *iH3P^p^7At»$g*aiSL/ 

fetalis*) ^iLSEtcIXOa^CtJCftr-Si. SiIffl)7'P 
^7A©^IEft:^ffl (»t0»^Di'5AOS 
ffl^) *5p^jhHit-e4>-5./c66. c©<fc^ft:— i^- *fic 

•ect?*^?iitt > ««wanaio-»N- F«jss**Pi{ca 

■5 A tt$8©S \k?f-<D tc&lc. fWW^n^5A««*a 
fitT 6#*ft:^g*^JS-r-j»(i-r S!iW**<ci>*«Wffll 

gift:<-5I^<t-rsc<b. WSIMtaiigB^OiWffli^a 
Atf$R©«#ii*»^©S^b. *l»tt. 
© 5 X-^^iE© Djggt4©(SM5r @ W £ L r (, „ 
[0 00 6] 

[iSgI?:JS^-r-5>fci*©^©] c©|6MK:J:4«tSWIBi 
M©Iffli/XfAii, ««8$fl©KSCcS:W6ti > 
$IJ®l^g©affl«:figffl3n^$IJ®7'P^A^$R?r. s 

«w«cfi*ji?rfifi«:ffitsfr 5^»i£t4©iatst*s <t . m 

fig©*i8*«ffll»S<!:«^Bl^{C«tfiS3 n. iiflffl^^ b 

■CB?faw^p^Atff««:a«-r*m«#^©^- 



(4) 

5 

tt»a«a*®&, £wr £<£>©-?*£. t©#s 
imTz>*mm&<D&\g&®t. mmmzftLxmmz 

10 

tooo7]cct, raemj £«. « : sl<«)a« 

-*-^*M^ - *StC»» 7 s ^ =y - ^ 4' itfcW Z>t£M<Dm 

mmm^ icmm $ ntc mmmttt *©a> 
Atj»#g#a:&ata;*n. fetf^ffistx-ct* -*>&©-?& 

fEt8Sl# £.§?CC j£ TiiHlW p 2f Alt 

*R©389©8B#*£j£-rsfc©-c&-3-r«><fci,>. 

fc«c, ^t8§")©i^SF*3©-7'C=i>ia-*JKcgM3n 

4l>5) &£©9a«yi£;B <*l»». C©jl{i#iffi» 
St^tSS«J®ilgF«3©'V-Y3» *>i=>&9. 3f3£©»ii 30 

ss^/b^p A-caffls tiiirf&'< v 3 > a t-aittna 
SiM&fi^iWrrs &©•?*&. cct. ±iEiifi^a 

4=7- (m^t. Js^fcto— fl&j.— tf) &<h'{c. cd 

ROM. F D . » tt I C # - K & 4©tBtt AS&iCt&lft 

©) r*ot4>J;l\ fete. ±IBjlffl~>x-r-A(ctoWS 
■CWfiJLr BP*>. J^LfcJ:5ttB!lffl©jMM& 
g©v ^ n > @ mitrftJZ.oim&mtm 7*p 2^5 A #^at> 

fatten. **gfttiB&as£cce&aa*S;£ m&m& 

3t5Ci^*5. Sfc. r{Wfpro^7Afflf*j 4 
B. iMffl-^n ^9 A©±*X»— »«r«lliR-r St»«*.ft 
tfcU *IJfP7'P^5A^©fl|«-C*)-5-C4>«fcC»L > $U 50 
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6 

II^d^ao — SB (M©*-?>^7y-$) © 

^F»i6tt©fatt*©j ii/ttt hm&rf 5 

- £ rS££?T 9 »$© E E P R O M^ffiffl 0 r 4> «fc (,> 
*i, £t'~; h-f§Mi«7 7-^ a EEPROM (t> 

wtc (bij%, **g*u®^aiwj!pe>©s*&utc) iUft 3 

C0008] comwvte. mmffiffl&i£ifimffiicii&& 
tttthtitcVLmtcis^r:. mm mztt l x&m l tcffl® 

m-c$> *) . c©iBtt#s«:#*a^wffli^'o f * Ats 
**HK«*«ttfcaK: 4> . *ttfiJ»^a*m ^ ^ u r 

ff*-s©ffl^WB#*-c«. gSW»7'ay7A. 

» t*-e©B#,^ -c!^s«/ha©»*tifiM©* * w-r ^ §ij 
SiT'ai/^A^SS^-cfc*, mtimw^-^e. 

t^ttmmm-rtii*. fflfflyutfv&oim&msi*: 

[0009] c<D§mxiz. mw-ya Att« 
Mwy'a>/7 2*mmzmm?zftm£mmzmw,xmffi 

J#T^>S t ft 5 iifiSaii#fR:« . **S*iJffli^S t (SSiJffi 
©*B*«*0L-C«lfiS-}-4*i&-r?fe. Bua?L/cJ:^{c, 

n«T©ffi^ft#ffl^T«jiS;-c^^> (;Kc<<tfe, 
!Wffli»B©S«««:iK Cfc^»©»iJW^n ^ 7 At9$E& 



7 

yu y<7 Att mz&is. L>tc v)-?z>w&tmm*mft?h 

0. ^V:a>^©J§!HI©*BB<>*e£&»). ffi«>T£ffi 

[ooio] #»«© r»aatff j «. 

■c. iwaafi*^atc«oriwsiWffli7 r a^Ai»« 
*a»2Mg-j-***B*a8W"c*j<. — tuiaifiMffi 
ma»i&ttf¥c«i9rt$ £ t r . 4>& < t 6 . 

b/c) fri2$lJ^7-a AfSfg^rBUIB^Opf* 'J x 'J 20 
[0 0 1 1 ] C©«gi©»SlA»flB«tt. MBM 

-r4»M¥*-rs<b. *£ttC©«yjftfBI§:7 p ci$'9AK: 

*8£©»f¥« (m««tt«II«lO*#ai? h«c» 
W&ftfc4*5£©x-( *t,>tt*PS©ff8-''**A^«: 
»W 6ftfc»flsA3J«it©»J£©* -f » *Sc £*) 

a & £f f U r . fneftftttfltti @ Ibtt k jWt 3 ft £ 4> © 
C©«fc^!5c«RR-C*ft«. <fcffl#tt. &fWi& 

4t5Ktft?*50-C. fflP^Dd/^AltlB©^^ 40 

[ o o i. 2 ] itc. c©#sib©»* i,i.>m<Dwmts mr 

ffiM««iffl#a*». KKtffffi (fflittfi— tf I DiBfliE 

«^ja«&tswi©*^±) ©a#*«***.. fjte* 

3iS6^©B5«:. ^CHiHul5*jA«jf^K:iJo-c. Bul2A^ 
*S*6©BKtii*©A#*ttffl#tcfi3*U A* 3 ft 
fc^SEte$R=&?*m^$iJ®«gfi!iJ©ia^K«c®»3ft 
fcBttt* #8©^- *Cc»-3(,>-c , A?t>3ft/ctgfiEt«$R© 



^§3 2002-44742 
8 

^^©ittCtt. jWIB«i2JWl;£KJteb&^a>&&£ 
-CSWtL&O) £>©-?£>£„ ffinaafiffiB^S 

HHt»«©A**S*«it. WKfci&IM&DWK:. 
l£l > «HiIIB»3AiJjfP«C t, >T . MIBA^©** h ©IS5E 

t»$R©A^ *^ffl««cs^ titcmmm^m 

-1fi. B9!2fgliEtit$8£§[f U ^ftlJE*- '<-flB©E 
tt^miC^^ftfciSiiEft^^-f^-^toT. Sft 
LfclSaEttfSWM^SiiS^S^f U C©flg£tt3©te£ 
#H5£ffre*>.5*§£K:©2> v B5flBafa«ia^^©f«IB 
fUfflJ^'P 9=? Alf$R©iifS^f "5 0KgftBtt£**S£ 
flW>i*(c«. mtfHirfBW^a^^AttfBwettii 
fg*H?fL/fet>) &©-?&&,, C©<fc^&t»j£©ti£fC 
«. 3§IE&igaEt^#A#3ft&^RB9, SUffll^a^? 

Atf$g©«#3A**^'5Ilife<i:^^ (J©^tCJ:-o-C«. SO 

ffl^n^^Ait^sme^t^nrtii^^) /c*. 3. 

tMenris-jfco, sfHai^p^Aftfgjisaffls 
ft s ^f*^ *w t >mm&-c ft±x- * s . 

[0013] C©#IW©*f*L/C^lJ©SS1ll». tfr 

iBafi®a^s* J . B?ta«jisiif^©Bff«c. ^wjbuib» 
ajftfp{c*s^r. ?at>«|fitnas»liJ©lBtt^«:SA 

3nyc»fg*j®iig©@wf§#8 <«*.«. ^stt#s^, 
Kesb^M-r-ststfe^WL. -^B5iBt>-"^--{*. Mia 

« fR©-5 % WEHW««K*fj£-r S«fl»^n ^7 Atf $B 

L /c@ Wtf fR(C StrE L * t »$lJt5P -f a 4^ -5 A tSfgtt @ SilM 

fc©-c*-S„ c©«fc^fe«tfiS"C*ft(f. 
ma©^ig»^gtc>pt)S pj#g t tt h a *> . — ?<d? 
-'i-tcfflm&m&^v Attfg^ts^L/cii^-c 

. 7'n^7 Att$R*s ^ > a - K 3 ft-CS 

[0 0 14] C©^W©Jf*Ul^lJ©SI«l«. BU 

IB»«*U8PJIS©**S()^-7'n A £&&ffl®7n 7 
7Ai*s, BUlBiifiMil^StC J; SSiiSd^CC J: -p "C » 
T ^ •b^HFnJftg^lBtt^-IS^^i^ * V i T(C®JS3 
ft-CC^-5.^©-C*-5>„ c<Dffif8,V$>tHt. mimismm 

^mc i s m jA«jfp© x 7 - (c «t r 9QttMtssa©s 

*FtH(ciHlM-C*5. BP*.. Wx.«mfiaiifl®a^©{c 
<fc -5»iiSftfP©x-7 - !C<t o XW!^SmM<Dji * <) x 'J T 
©f ; -^A««3ftrUSo/'cj: ; 5^ii^-C^. Td»*: 
x^pJtg^cliST^gsa 3 ft/cBuIBB^abCP 7' a ^ 5 A i 
**SW ^ay^ACc^-^-C. m«M8PftiB©S^M 
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W»y7h (OS) *«*u IfcrtWP^a^A 
F^#fW«»*T**i«, ?^sifftefiEoT^> 

TR^SftTi>T6<^c&rac^*rfc&c>. 

[0015] 10 

^rA(t #^Jffll^S©*iJfflJ^ny^A«fR«rafi 

Wt^^ECU (ftaiBJ^L— h) 1 0<t. 1f-/<-2 
*6«fflB«l»^D^Afi|«t*fiLrECU 1 0O§f 

^V3>3 0i**tS. &*>\ ECUIO^ 20 

X'J7*? h7-^ (IftLAN) *»RJEUTC^rfccfc 
l\, $/cC©«^ ^V3>3 0B, ECUlOii^ 

^^M^-^t^i^^^-cDJRFjECDteR (SJH2> 
CCR{I3ti/c7r-r^-^-<bLm>e^- 

[00161^/c, ECU10B, CPU1 K RAM 
12, ROMA13, ROMB14, M-/>^-7x 
-XI 53&»6tt*-7-f3>*4tr»l8IHB*«*.**-f 

i WA«^7-->-r>F-5©»o{ai3.^^ ht^§ 
^jA^n^ 0 */c, ccdecu i oonm («a«dc 

12 V) tt % H^tt0fc*WD'<?^y-*»6-f ^- 50 
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J/a>X-fym^lt«lft3tl4. ROMA 
13(t ECU 1 0(DS*B6fP^py^A (OS) *a 

&oTfcJ:l>U iI3?<DROM (77^ROM, *>B 
EPROM) r*ott>iU — ROMB14B, 

©fWW/oi^AtMRi. BHW«(ca>«l^ a— !f 

«fcR5esns i d»#scwbk##) rnrnmi 

(DROMT\ ««WW«ji*sWtt«c^*y (if E 
PROM^B77«^*^ytci') -CfltaRSftTC* 
S. CCr, i2Ut#$Bi@Wtt$R«. ROMB14CD$J 

«4w;7i4oWS. tt*5, laEWffi&BWW 
ROMA 1 3(Dl#S(D^^yx 'J7Klfiflfc34VC 
l>rfc<fcl>. */c. CCt'(7)ROMA 1 3 tROMB 1 
4©«fiB*. — flc©y*'J (IfOEEPROM^B 

[0017] CCDECU 1 (XD-f >*-:7*~* 1 5 CC 
W»*t*16 <0»*.«* Jr-f> F-JfX^A 

CDA^pJtgi^on^o f ItECUlOB, ^Jx. 

w^^nrgiju, aur <ommxmtc***i>x\*. ro 
MA 1 3-^ROMB 1 4cca»snfcW»^a^^A« 

•mot* i 6 **wp-r **«ra&ffc*iSfT r s o c (DR. 

ROMB 1 4CC*lJiaJ^ r P^ r '7A«$R*i*eja<D»-&{C 
« % ROMA 1 3^C^i$ti/cS«W^P^^At»$R 
(D#CCfi£oT\ JJE«l»»ff4H?T-rS. */c, ROM 

b i 4{c*ueu^py5 A«*^a»snrc»4is^cc 

^ 4 ROMA 1 3MROMB 1 4 CC3£Si£ ft/e3« 7' 
p^^A«*«:Seor. ±IB*W86f / F4Htf-r'S (II 

ROMA 1 3 0t»*i ROMB 1 4(D«*#S1SX 
tt^JB^ilSCCtt, »-CS*ii*tliTcROMB 1 4<DtS 

$E4M^Lr^ffl-r^) o ifeECuiott, ^spo^* 

3nn^ 0 ft*?. ffifi«8M*i8T-l 9B. ^liB$S 



(7) 

11 

stcssKDiffitaoriiS. ft*>\ ccDaftifi^aMS 

SSHMFF-l 9<Df±«W:. 1$fc|Rj£3tittC>**. ffi^X h 
HM)^V3>IIHilc«|8ht 

#!&Sfc& * ©fa*©-* A 10 

ecu i o tAV3>3 omccsstt-rsflUsSiurfeJ: 

[0018]^lt, W3>3 0B, C<Di#^y-h 

reufc«Sf«a4«»snsc & cc<t oraii« i 
urif--^-2ia(twitt4ftorc»**>©r**. ft 

sit, Hjewaw>BK*/M>ra«ini«cr^-fex-r 

[0019] ^CCC, ±itiL/c*»g$iJfflJ^CDaffl^^ < r 30 
OMB (#jA»fPffl^Py^A(DrtSft^) t^tccst 

ecu i oiifiii cc*torjRtfrrs (xf-^s 

l) 0 #Cl>t\ $SCD>f^>a >*-©tftf1^Cc<fco 
TECU l 0©l^t>L (Xf 7 «2) , ^V3 
>30*Sttor^>x|— ftfcfti&tt f¥flj P y 

7A4»Tt^ (Xf77'S3) . ft*5, ffl^(DmiE*« 40 

Wmmmm L/cJ: 5 tc* A L A N *«WE 0 r C » i »^ 
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(54) OPERATING SYSTEM FOR VEHICLE CONTROL APPARATUS AND THE APPARATUS 

(57)Abstract: 

PROBLEM TO BE SOLVED: To provide an operating system for a 
vehicle control apparatus capable of writing (including re writing) 
a control program information about the hard configuration of the 
apparatus fixed in a vehicle, and also without any need for 
preparation of a special apparatus to provide the program 
information for writing the information. 

SOLUTION: The system is composed of enabling to connecting a 
server 2 to provide the information via a communication network 
1 and the apparatus in a state of mounting on a vehicle, so that 
the system enables to communicate to the server 2 via the 
network 1, and comprises a communication processor (a personal 
computer 30, an ECU 10) enabling to carry a writing operation 
into a rewritable nonvolatile memory (ROMB 14) to receive the 
information from the server 2 and to be mounted on the 




apparatus. 
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CLAIMS 



[Claim(s)] 

[Claim l] A storage means of a non-volatile to memorize electrically the control program information 
which is prepared in a mounted control unit and used for employment of a mounted control unit possible 
[ rewrting ], A communication network is minded for said control program information. With the server 
which can provide It is constituted possible [ the mounted control unit in the condition of it having been 
prepared in the mounted control unit, or having been carried in the car, and connection ]. The operations 
system of the mounted control unit characterized by having a communications processing means by 
which write-in actuation which said server and communication link are possible, receives said control 
program information from said server through a communication network, and is written in the 
predetermined memory area of said storage means can be performed. 

[Claim 2] Said server has the function to transmit said control program information automatically to said 
communications processing means, according to the Request to Send from said communications 
processing means. Said write-in actuation The communication link initiation processing which logs in to 
said server, and the Request-to-Send processing which transmits the signal of said Request to Send to 
said server, The operations system of the mounted control unit according to claim 1 characterized by 
being what carries out sequential execution of the reception which receives said control program 
information transmitted by said server, and the processing for writing said received control program 
information in said predetermined memory area. 

[Claim 3] Said communications processing means is the operations system of the mounted control unit 
according to claim 1 or 2 characterized by starting and carrying out said write-in actuation by initiation 
command actuation by the user behind powering on automatically after powering on. 

[Claim 4] Or it sets in said write-in actuation, said communications processing means - the input means 
of authentication information - having before said write-in actuation - Require the input of the 
authentication information from said input means of a user, and the inputted authentication information 
is based on the data of the authentication information beforehand registered into the storage means by 
the side of a mounted control device. The operations system of a mounted control unit given in claim 1 
thru/or any of 3 they are. [ which performs the collating check of the inputted authentication information, 
and is characterized by carrying out said write-in actuation only when the result of this collating check is 
affirmative ] 

[Claim 5] Or it sets in said write-in actuation, said communications processing means " the input means 
of authentication information - having ■■ before said write-in actuation It has the function to require 
the input of the authentication information from said input means of a user, and to transmit the inputted 
authentication information automatically to said server. Said server Receive said authentication 
information and it is based on the data of the authentication information beforehand registered into the 
storage means by the side of said server. The operations system of a mounted control unit given in claim 1 
thru/or any of 4 they are. [ which performs the collating check of the received authentication information, 
and is characterized by transmitting said control program information on said communications 
processing means only when the result of this collating check is affirmative ] 
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[Claim 6] Or it sets in said write-in actuation, said communications processing means - before said 
write-in actuation - It has the function to transmit automatically the proper information on the mounted 
control device beforehand registered into the storage means by the side of a mounted control device to 
said server. Said server The operations system of a mounted control unit given in claim 1 thru/or any of 5 
they are. [ which receives said proper information and is characterized by performing transmission for 
said communications processing means only about the control program information corresponding to said 
proper information among said control program information by which the multi-statement was carried 
out ] 

[Claim 7] The operations system of a mounted control unit given in claim 1 thru/or any of 6 they are. 
[ which is characterized by registering the basic actuation program and primary control program of said 
mounted control unit into the storage means or memory area which cannot be accessed depending on the 
write-in actuation by said communications processing means ] 

[Claim 8] A storage means of a non-volatile to memorize electrically the control program information 
which is prepared in a mounted control unit and used for employment of a mounted control unit possible 
[ rewrting ], It is constituted possible [ the mounted control unit in the condition of it having been 
prepared in the mounted control unit, or having been carried in the car, and connection ]. The operations 
system of the mounted control unit characterized by having a communications processing means by 
which write-in actuation which receives through a communication network and writes said control 
program information currently offered through the communication network in the predetermined 
memory area of said storage means can be performed. 

[Claim 9] The mounted control unit characterized by to have a storage means of a non-volatile to 
memorize electrically the control program information used for employment of the mounted control unit 
concerned possible [ rewrting ], and a communications processing means to by_which write-in actuation 
which receives through a communication network and writes said control program information currently 
offered through the communication network in the predetermined memory area of said storage means 
can be performed. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] This invention relates to the operations system which can write in easily the 

control program information on a mounted control unit, or a mounted control unit. 

[0002] 

[Description of the Prior Art] In recent years, control of the various devices and systems (a keyless entry 
system, an automatic window system, engine control system, etc.) which are carried in cars, such as a 
four-flower automobile, is performed by the program control for which the many used the microcomputer 
(henceforth a microcomputer). And it has only the usual ROM (rewrting impossible or difficult thing) as 
memory for control program storing, the control program was beforehand registered into said ROM in the 
perfect form using the ROM writer etc., and the common mounted control unit which performs such 
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program control was supplied as a finished product which also includes a control program at the time of a 
car manufacturer's Rhine injection. Moreover, when the registered control program needed to be 
corrected or changed, the control unit (ECU) which constitutes a mounted control unit from a 
predetermined attachment part (for example, complicated locations, such as the interior of Doat) of a car 
was removed, and the trouble activity of having attached the new control unit which carried said ROM 
into which the proper control program was registered, and exchanging the whole was usually done. 
[0003] 

[Problem(s) to be Solved by the Invention] For this reason, the conventional mounted control unit 
mentioned above had a limitation in compaction of a development cycle, and had the problem that 
correspondence was difficult for a demand of a commercial scene in recent years. Because, in spite of each 
device and system of a car having had advanced features and having complicated the contents of control 
From the inclination of the further shortening of the development cycle of the car itself, much more 
compaction is requested also from the development cycle of a mounted control unit. By the attachment 
point in time by the new car of the time of sale it is because it is becoming very difficult [ it / to carry out 
enough development (a pro gram- verification activity besides specification decision or the creation activity 
of the program itself - or for it to contain program ****** business) of a control program ]. In addition, 
when it supplies without fully doing the verification activity of a control program etc. temporarily, and the 
trouble by the bug of a control program etc. occurs, the trouble activity of exchanging as the whole unit 
which constitutes the mounted control unit concerned was mentioned above is needed about all vehicles, 
a selling stage must be extended on the contrary depending on the case, and there is a possibility that 
great damage may arise. Moreover, although there was a request of wanting to make the specification 
decision of a mounted control unit late as much as possible also from on contention (I wanting to 
determine the last specification just before new-car-registrations initiation), from a viewpoint of user 
service as a car manufacturer side, since it was the same, there was also a problem that it could not reply 
to this request enough. 

[0004] In addition, the technique which carries out loading of the control program to JP, 4- 246730, A, 
JP,3-270605,A, or JP,9"91009,A from the outside to the mounted control device which is in a completion 
condition in hard, and the technique which rewrites a control program without exchanging the hard 
configuration of a mounted control device are indicated. It becomes possible to write in the control 
program as a finished product finally, or to rewrite it to the control program of the correction version, 
without according to the technique indicated by these official reports, exchanging a mounted control unit, 
also after attaching a mounted control unit to a car. For this reason, if the method of rewriting to the 
control program of the last version in Diller just before selling initiation is adopted after writing in the 
control program of the provisional version, or the control program which has only the basic function of 
necessary minimum [ that time ] at the attachment time by the new car of the time of sale, for example, 
shipping a car from a car manufacturer, the development cycle of a control program will be shortened 
substantially and it will become possible to make the specification decision of a mounted control unit just 
before sale initiation more further. 

[0005] every [ however, / which performs the writing and rewriting of the control program of a mounted 
control unit since each system indicated by the official report mentioned above is what connects locally 
the special equipment (for example, computer system which generates the control program according to 

4 



JP,2002-044742,A 

the model of mounted control unit) for offering a control program to a mounted control unit ] site (for 
example, the dealer and the repair shop of a car) - respectively - the above - there is demerit in_which it 
must have special equipment. Moreover, the problem that it must go to a dealer etc. for correction of the 
control program of a mounted control device or updating (or a car must be deposited in a dealer etc.) also 
has the general user of a car. If the correction and updating of a control program can be performed if 
needed themselves (after paying a version up tariff to a car manufacturer etc. depending on the case), a 
user's convenience will increase, without in other words a general user's going to a dealer etc. However, it 
is trouble, while the special equipment (storage which registered control program information at least) 
with which a general user offers control program information needs to come to hand for that purpose in 
the case of the system of said official report and taking time amount. Moreover, if a general user will deal 
with directly the equipment (or storage which registered control program information) which offers 
control program information, since unjust use (use by two or more sets, surreptitious use of a program, 
etc.) of a control program is difficult to prevent, with the technique indicated by the official report 
mentioned above, it will be thought that implementation of the rewriting activity of the control program 
by such general user is impossible in practice. Then, attaching the hard configuration of a mounted 
control unit to a car, this invention can write in control program information (rewriting also contains), 
and makes it the key objective to offer the operations system of a mounted control unit or the mounted 
control unit which does not moreover need to prepare the special equipment which offers control program 
information for the writing of control program information on the spot. Furthermore, it aims at easy-izing 
of it being satisfactory and enabling write-in actuation of the control program information on the 
mounted control unit by the general user, and write-in actuation of the control program information on a 
mounted control unit, or the mistake of write-in actuation and reduction of unjust possibility. 
[0006] 

[Means for Solving the Problem] The operations system of the mounted control unit by this invention A 
storage means of a non-volatile to memorize electrically the control program information which is 
prepared in a mounted control unit and used for employment of a mounted control unit possible 
[ rewrting ], It is constituted possible [ the mounted control unit in the condition of it having been 
prepared in the mounted control unit, or having been carried in the car, and connection ]. The specific 
server for example, which offers said control program information through a communication network, and 
a communication link are possible. For example, it has a communications processing means by which 
write-in actuation which receives said control program information through a communication network 
from said server, and is written in the predetermined memory area of said storage means can be 
performed. Moreover, the mounted control unit by this invention has a storage means of a non-volatile to 
memorize electrically the control program information used for employment of the mounted control unit 
concerned possible [ rewrting ], and a communications processing means by which write-in actuation 
which receives through a communication network and writes said control program information currently 
offered through the communication network in the predetermined memory area of said storage means 
can be performed. 

[0007] Here, a "communication network" may be a wide area network preferably, for example, may be the 
Internet which may consist only of a public telephone network and minded the public telephone network, 
intranet, or extranet. Moreover, the various control program information on the mounted control device a 

5 



JP,2002-044742,A 

"server" is the computer system with communication facility installed in the maintenance facilities of the 
arbitration in for example, a mounted control-device manufacturer, a car manufacturer, or Diller, and it 
has jurisdiction [ control device ] is registered suitably, and the storage management is carried out. In 
addition, in this server, storage maintenance of all the control program information does not have to be 
carried out, storage maintenance only of the necessary minimum information is carried out, and the 
remaining part of control program information may be generated if needed. Moreover, the 
"communications processing means" in the above-mentioned operations system For example, while 
connecting with communication terminals, such as a cellular phone (or terminal of the circuit for 
fixed-line telephones), and being accessible to said communication network It connects with the 
microcomputer in a mounted control unit at a local, and they are communication link processors (or), such 
as a personal computer (henceforth a personal computer) which can communicate. It consists of a 
microcomputer in this communication link processor and a mounted control unit, and said personal 
computer employed by the predetermined program for write-in actuation performs said write-in actuation. 
What is necessary is here, just to distribute the program for write-in actuation of the above-mentioned 
communication link processor in advance in the form which a manufacturer or a car manufacturer of for 
example, a mounted control device etc. created, for example, was stored in storages, such as CDROM, FD, 
or an IC card, at Diller (in or the case general user) of a car etc. Moreover, although the above-mentioned 
communication link processor may be a commercial personal computer, a commercial personal digital 
assistant, etc., it may be the special-purpose machine (for example, thing into which the predetermined 
program for write-in actuation was registered beforehand) which the manufacturer of a mounted control 
unit etc. developed. In addition, the "communications processing means" in the above-mentioned 
operations system may consist of microcomputers in a mounted control unit etc. That is, the 
predetermined program for write-in actuation can be beforehand memorized by the microcomputer of a 
mounted control unit itself, and direct communication terminals (cellular phone etc.) can be connected to 
the mounted control unit itself without using the personal computer which is the separate communication 
link processor which was mentioned above, and it can also be made to function as a "communications 
processing means" of this invention. Moreover, "control program information" may mean the information 
which constitutes the whole control program or a part, and may be the information on the whole control 
program, and a part of (a specific routine and a specific parameter) information on a control program is 
sufficient as it. Moreover, although the usual EEPROM which performs data elimination, for example per 
cutting tool may be used as "a storage means of the non-volatile memorized possible [ rewrting ] 
electrically", the flash EEPROM (the so-called flash memory) which carries out all bit package 
elimination may be used, moreover — "-- control program information — receiving -- " — the mode in which 
a communications-processing means only receives the control program information as which the mode 
(mode to which a specific server transmits control program information, corresponding to the demand 
from a communications-processing means) which control program information downloads positively is 
sufficient, and which carried out and was transmitted, for example from the specific server automatically 
(namely, he has no demand from a mounted control unit side) by access from a 
communications-processing means is also contained. 

[0008] By this invention, in the condition that the mounted control unit was attached to the car, it is 
possible to write in a rewritable storage means by which the control program information received 
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through the communication network was prepared in the mounted control unit (for re-writing to be used), 
and a mounted control unit is employed for the control program information written in this storage 
means. For this reason, it becomes possible to write in the control program as a finished product finally, 
or to rewrite it to the control program of the correction version, without removing and exchanging a 
mounted control unit, also after attaching a mounted control unit to a car. therefore, at the attachment 
time by the new car of the time of sale The control program of the provisional version or the control 
program which has only the basic function of necessary minimum [ the time ] is written in. For example, 
if the method of rewriting to the control program of the last version (or the perfect version) in Diller just 
before selling initiation is adopted after shipping a car from a car manufacturer The development cycle of 
a control program is shortened substantially and it becomes possible to make the specification decision of 
a mounted control unit just before sale initiation more further. Moreover, if there is the need for the 
improvement in functional which can respond cheap early easily even if fault is in a control program, 
even if it will become the used car whose user service is attain also after delivery after sale, in order not to 
exchange the hard components whose modification of the contents of control according to the liking of a 
user which can use the newest function on control is attain ( it reuses), many practical advantages that it 
can contribute also to environmental preservation are acquire extremely. 

[0009] And in this invention, since control program information writes in through a communication 
network and offer of it is attained in a site, it is not necessary to prepare the special equipment which 
offers control program information on the spot. For this reason, it can realize, without various kinds of 
advantages mentioned above producing human and the financial burden in Diller of a car etc. so much. In 
addition, the communications processing means which is needed on the spot in case this invention is 
carried out Even when it adds and constitutes equipment separate from a mounted control unit, as 
mentioned above Comparable [ as a commercial personal computer, a personal digital assistant, or them ] 
or it can constitute from a simple special-purpose machine not more than it (at least). It is easy to be a 
simple thing without the need of performing complicated processing which memorizes the control 
program information on a large number according to each model of mounted control unit, or generates the 
control program information which suits the specific model of mounted control unit. Moreover, when it 
constitutes the communications processing means of this invention only for mounted control unit itself, 
only by connecting a cellular phone etc. to a mounted control unit, the writing (it rewrites and contains) of 
control program information is attained, equipment with a separate personal computer etc. also becomes 
unnecessary, and it can realize very cheaply. 

[0010] In addition, specifically, "write-in actuation" of this invention is automatically executable with the 
following processing facilities of said server and said communications processing means. That is, 
according to the Request to Send from said communications processing means, the function to transmit 
said control program information automatically to said communications processing means is prepared for 
said server. Communication link initiation processing in which said communications processing means 
logs in to said server at least as contents of processing of said write-in actuation on the other hand, The 
Request to Send processing which transmits the signal of said Request to Send to said server, and the 
reception which receives said control program information transmitted by said server, What is necessary 
is just to set up said predetermined program for write-in actuation so that sequential execution of the 
processing for writing said (that is, it having downloaded) received control program information in said 
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predetermined memory area may be carried out. 

[0011] Moreover, said communications processing means starts said write-in actuation by initiation 
command actuation according to the user behind powering on automatically after powering on, and the 
desirable mode of this invention carries out. For example, the personal computer which constitutes said 
communications processing means is connected and started to a mounted control unit or a communication 
terminal, and if actuation of performing the predetermined program for write-in actuation is carried out, 
after that, said write-in actuation will be automatically carried out by this program for write-in actuation. 
Or if the mounted control unit itself which functions as said communications processing means is 
connected to a communication terminal and the specific control units (for example, specific switch of the 
actuation input device prepared in the specific switch formed in the body unit of a mounted control unit or 
the instruments panel of a car etc.) of a mounted control unit are operated, the predetermined program 
for write-in actuation will be performed in the mounted control unit itself, and said write-in actuation will 
be carried out automatically. With such a configuration, though actuation is needed, since easy initiation 
command actuation which was mentioned above is only carried out, the write -operation of control 
program information becomes very easy, and the write-operation by the general user of a user also 
becomes possible. 

[0012] Or it sets in said write-in actuation, moreover, another desirable mode of this invention — said 
communications processing means - the input means of authentication information (for example, 
combine with user ID, a personal identification number, or a fingerprint) having - before said write-in 
actuation - Require the input of the authentication information from said input means of a user, and the 
inputted authentication information is based on the data of the authentication information beforehand 
registered into the storage means by the side of a mounted control device. The collating check of the 
inputted authentication information is performed, and only when the result of this collating check is 
affirmative, said write-in actuation is carried out (when a collating check result is negative, said write-in 
actuation is not started or it does not perform to the last). Or it sets in said write-in actuation, or said 
communications processing means - the input means of authentication information - having - before 
said write-in actuation It has the function to require the input of the authentication information from 
said input means of a user, and to transmit the inputted authentication information automatically to said 
server. On the other hand, said server receives said authentication information and it is based on the data 
of the authentication information beforehand registered into the storage means by the side of said server. 
The collating check of the received authentication information is performed, and only when the result of 
this collating check is affirmative, said control program information on said communications processing 
means is transmitted (when a collating check result is negative, automatic transmission of said control 
program information is not performed, for example). In such a configuration, since the writing of control 
program information becomes impossible unless proper authentication information is inputted (the 
reception of control program information itself becomes impossible depending on the case), it is contrary 
to volition, such as a user, and accidentally, control program information will be able to be rewritten, 
control program information will be able to be rewritten unjustly, or the fault for which control program 
information is plagiarized can prevent with high dependability 

[0013] Or it sets in said write-in actuation, moreover, another desirable mode of this invention - said 
communications processing means ■■ before said write-in actuation — The proper information on the 
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mounted control unit beforehand registered into the storage means by the side of a mounted control unit 
It has the function (for example, transmitting model information, the version information of a control 
program, etc. automatically) to said server. On the other hand, said server Said proper information is 
received and transmission for said communications processing means is performed only about the control 
program information corresponding to said proper information among said control program information 
by which the multi-statement was carried out (for example, when the Request to Send from a 
communications processing means is received). The control program information which is not equivalent 
to the received proper information is transmitted automatically and twisted, and is a thing. Even when it 
was such a configuration and two or more sorts of control program information is assigned to one server 
so that correspondence in two or more models of mounted control devices may be attained, there is an 
advantage which can avoid the fault in which the mistaken control program information will download 
and will be written with high dependability. 

[0014] Moreover, another desirable mode of this invention is registered into the storage means or memory 
area which the basic actuation program and primary control program of said mounted control unit cannot 
access depending on the write-in actuation by said communications processing means. If it is this 
configuration, a trouble which becomes unusable to the basic function of a mounted control device by the 
error of the write-in actuation by said communications processing means is certainly avoidable. Namely, 
even when the data of said predetermined memory area have been destroyed by the error of the write-in 
actuation by said communications processing means, for example, minimum is possible for harnessing 
the basic function of a mounted control unit with said basic actuation program with which it registered 
with the location which cannot be accessed, and a primary control program. In addition, although a basic 
actuation program means the operating system (OS) which operates the microcomputer of a mounted 
control unit and a primary control program means the application software which realizes the basic 
function (switch actuation will be followed if an automatic window is a controlled system, and it is only 
the control function which only moves a window up and down) of a mounted control unit, these do not 
necessarily need to be another programs and it cannot be overemphasized here that it may be set up as a 
program of one. 
[0015] 

[Embodiment of the Invention] Hereafter, an example of the gestalt of operation of this invention is 
explained based on a drawing. Drawing 1 is drawing showing the system configuration of this example of 
a gestalt, and drawing 2 is a flow chart which shows the procedure of control program write-in actuation 
of this system. This system has ECU (control unit) 10 which are the server 2 which can provide, and the 
body of a mounted control device through a communication network 1 about the control program 
information on a mounted control device, and the personal computer 30 for performing write-in actuation 
which receives said control program information from a server 2, and is written in the predetermined 
memory area of ECU10. In addition, ECU10 is formed for every controlled system in a car, and ECU10 of 
these plurality is connected possible [ two-way communication ], and it may constitute the Local Area 
Network (in the car [ LAN ]) in in the car. Moreover, the personal computer 30 constitutes the 
communications processing means of this invention with ECU10 in this case. Here, a communication 
network 1 is the Internet which went via the public telephone network. Moreover, a server 2 is a 
computer as a file server installed in the specific facilities (management pin center,large) of for example, a 
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mounted control -device manufacturer, a car manufacturer, or Diller, and the various control program 
information on the various mounted control devices (for example, hard disk etc.) it has jurisdiction 
[ control devices ] is suitably registered into this server's 2 storage means, and he is memorized. In 
addition, this server 2 has the function to transmit automatically the control program information which 
corresponds to the client (for example, personal computer 30) which transmitted this Request to Send etc., 
when the signal of the Request to Send of said control program information is received proper from a 
client side through a communication network 1 (the detail after- mentioned is carried out). Moreover, the 
authentication information and proper information which are mentioned later are beforehand registered 
into a server's 2 storage means by a car manufacturer's manager etc. for every (every [ or ] class of 
mounted control unit) user. 

[00161 Moreover, ECU10 is an electronic control unit equipped with the control circuit containing CPU11, 
RAM12, ROMA13, ROMB14, and the microcomputer that consists of an interface 15, and it comes to 
contain the circuit board in which said control circuit was formed in a unit case. In addition, when it is the 
control unit of an automatic window, this ECU10 is arranged inside Doat of a car, and is included in a car. 
Moreover, the power source (for example, DC 12V) of this ECU 10 is supplied through an ignition switch 
etc. from the dc battery of the car which carried out the illustration abbreviation. In addition, the 
software containing the basic actuation program (OS), the program for write-in actuation mentioned later, 
or the fundamental control program (application software) of ECU 10 may be ROM registered beforehand, 
and ROMA 13 may be the memory which can be rewritten electric, and may be the usual ROM (a mask 
ROM or EPROM). Control program information for ROMB14 to, correct or update the whole control 
program or a part on the other hand, Authentication information (the ID number and personal 
identification number which are set up for every user in this case), By ROM for registering proper 
information (the Per John information, such as a management number which specifies the model 
information for specifying the model of mounted control device, the version of the control program under 
current employment, etc.) It consists of memory (usual EEPROM or a usual flash memory etc.) which can 
be rewritten electric. Here, authentication information and proper information are beforehand registered 
into the specific memory area of ROMB14 in processing actuation with another write-in actuation of 
control program information. Moreover, the memory area into which authentication information and 
proper information (version information ****) were registered is the area which cannot be accessed in 
write-in actuation of control program information. In addition, authentication information and proper 
information may be registered into the specific memory area of ROMA13. Moreover, naturally there may 
also be a mode which constitutes the function here of ROMA13 and ROMB14 from memory (usual 
EEPROM or a usual flash memory etc.) of one. 

[0017] A controlled system 16 (for example, drive motor of an automatic window system) and the sensors 
18 including various input switches are connected to the interface 15 of this ECU 10, and the output of the 
control signal over a controlled system 16 and the input of the signal from the sensors 18 including 
various input switches are possible. And current supply of ECU10 is carried out by the ON actuation of an 
ignition key which carried out the illustration abbreviation, for example, it is started by it, and performs 
control action which controls a controlled system 16 based on the input signal from the various sensors 18 
in the usual operating status according to the control program information registered into ROMA13 or 
ROMB14. Under the present circumstances, when control program information has not been registered 
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into ROMB14, the above-mentioned control action is performed only according to the 
primary-control-program information registered into ROMA13. Moreover, when control program 
information is registered into ROMB14, the above-mentioned control action is performed according to the 
control program information registered into ROMA 13 and ROMB14 (however, in case the information on 
ROMA 13 and the information on ROMB14 overlap or are contradictory, it is used, giving priority to the 
information on ROMB14 written in later). Moreover, ECU10 is equipped with the function which 
communicates between external personal computers, and the communication-wire connection terminal 
19 for it is connected to the interface 15. In addition, the communication-wire connection terminal 19 is 
formed in the instruments panel front face of a car etc., and a dealer's serviceman and general user can 
also connect a communication wire with a personal computer 30 easily. In addition, although especially 
the specification of this communication wire or the communication-wire connection terminal 19 is not 
limited, from viewpoints, such as lowcost izing, its thing according to the general-purpose specification 
currently used for the general communication link between personal computers is desirable. Moreover, it 
is good also as a configuration which forms for example, the port for infrared ray communication, or a 
communications antenna instead of the communication-wire connection terminal 19, and performs radio 
by infrared radiation or the electric wave between personal computers 30. Moreover, when conversion of 
signal aspect is needed for the communication link between personal computers 30, it is good also as a 
configuration which connects the modem unit for it with ECU10 between personal computers 30. 
[0018] And a server 2 and a communication link are possible for a personal computer 30 through a 
communication network 1 by connecting with the cellular phone which the communication link of is 
locally attained with ECU 10 in the condition of having been carried in the car by connecting the 
communication wire which is the personal computer which can carry a note form and was mentioned 
above, and carried out the illustration abbreviation in this case further, for example. In addition, it cannot 
be overemphasized that various well-known methods can be used for the topology with a communication 
network 1. For example, the modem (what performs conversion between a digital signal and a sound 
signal) may be built in the personal computer 30, and the mode which connects through this modem and 
accesses the circuit of a fixed-line telephone through the circuit of a fixed-line telephone at a 
communication network 1 is sufficient. Or the method which connects a cellular phone to a personal 
computer 30 may be used. Moreover, the predetermined program for write-in actuation is beforehand 
installed on the built-in hard disk through CDROM etc., and the personal computer 30 in this case 
realizes the below-mentioned write-in actuation by performing this program for write-in actuation. 
[0019] Next, the procedure used and actuation of the operations system of a mounted control unit which 
were mentioned above are explained with the processing facilities (the contents of the program for 
write-in actuation etc.) of the personal computer 30 grade for it. In this system, in writing control 
program information in ECU 10 of a mounted control unit (or it rewrites), as shown in drawing 2 , it 
connects a personal computer 30 with ECU10 to a communication network 1 first (step Si). Subsequently, 
the power source of ECU10 is turned on by actuation of the ignition key of a car etc. (step S2), and the 
program for write-in actuation which started the personal computer 30 and was installed is performed 
(step S3). In addition, as two or more mounted control units mentioned above, when in the car [ LAN ] is 
constituted, a personal computer 30 is connected to in the car [ this / LAN ], and the actuation specified in 
advance is needed in to any of two or more ECU 10 which constitutes in the car [ LAN ] write-in actuation 
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of control program information is performed. In addition, in the below-mentioned step S4 etc., the 
configuration to perform may be used for this assignment actuation. 

[0020] make it any - if the predetermined program for write-in actuation starts in a personal computer 
30 in this way, a personal computer 30 will display a screen as first shown in that display 31 at drawing 1 , 
and will require initiation command actuation of the input of authentication information (they are an ID 
number and a personal identification number in this case), and write-in actuation. And if initiation 
command actuation of the input of authentication information and write-in actuation is made, it will be in 
the waiting state of O.K. signal which transmits and mentions the signal of a write-in preparation 
command or authentication information later to ECU10 (specific ECU specified by assignment actuation 
when two or more ECUs constituted in the car [ LAN ]) (step S4). On the other hand, ECU10 (CPU 11) 
which received the signal of this write-in preparation command and authentication information shifts to 
the condition for write-in actuation from the usual operating status, operates according to the program 
for write-in actuation by the side of ECU registered into ROMA13, and performs the collating check of 
authentication information first. That is, the authentication information memorized by the specific 
memory area of ROMB14 is compared with the received authentication information, if in agreement, it 
will consider as collating check coincidence, and if inharmonious, it will consider as a collating check 
inequality. Here, in the case of a collating check inequality, the personal computer 30 which transmitted 
the signal of an authentication information error to the personal computer 30, and received this displays 
the purport which it would be in the error situation, for example, authentication information is mistaken, 
and cannot perform write-in actuation on a display 31 in written form etc., and reports it. And in collating 
check coincidence, after ECU10 performs the write-in preliminary treatment (for example, processing of 
initializing the predetermined memory area of ROMB14) of control program information, it transmits the 
proper information memorized by O.K. signal (signal which shows that write-in preparation was 
completed), and ROMA13 to a personal computer 30, and will be in the state waiting for receiving of 
control program information (step S5). 

[0021] Next, if a personal computer 30 receives the above-mentioned O.K. signal, a personal computer 30 
will carry out sequential execution of the communication link initiation processing which logs in to a 
server 2, and the Request-to*Send processing which transmits the signal of said Request to Send, and 
said signal of authentication information or proper information to a server 2 (step S6). And the server 2 
which received signals, such as the above-mentioned Request to Send, performs the collating check of 
authentication information first. That is, the authentication information memorized by a server's 2 
storage means is compared with the received authentication information. Here, in the case of a collating 
check inequality, the personal computer 30 which transmitted the signal of an authentication information 
error to the personal computer 30, and received this displays too the purport which it would be in the 
error situation, for example, authentication information is mistaken, and cannot perform write-in 
actuation on a display 31 in written form etc., and reports it. And in collating check coincidence, according 
to the data table (or selection condition) beforehand set up by managers, such as a car manufacturer, the 
newest control program information according to the authentication information and proper information 
which were received is chosen out of the control program information memorized by the storage means 
(step S7), and this is transmitted to a personal computer 30 (step S8). In addition, finally at the time of 
transmission of this control program information, a completion signal is transmitted. 
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[0022] Next, the personal computer 30 which received this control program information and was stored 
temporarily at internal RAM etc. returns a server 2 the data of the received control program information, 
after receiving the above-mentioned completion signal (step S9). And the server 2 which received this 
return judges whether full coincidence of the returned data is carried out as compared with the data 
transmitted previously, and when full coincidence is being carried out, he transmits O.K. signal to a 
personal computer 30 (step S10). Here, while repeating processing again, for example from step S6 noting 
that a communication link error (error l) produces the personal computer 30 which transmitted the 
signal of a communication link error to the personal computer 30, and received this, when data have not 
carried out full coincidence, that is displayed on a display 31 and it reports (the lamp of the error 1 it is 
errorless from a field stellate as shown in drawing 1 in this case is indicated by lighting). In addition, 
there may also be a mode which, of course, omits such reconfirmation actuation (the above-mentioned 
step S9, S10). Subsequently, the personal computer 30 which received the above-mentioned O.K. signal 
transmits the data of the received control program information to ECU10 (specific ECU10 which was 
specified in the configuration in the car [ LAN ]) after that (step Sll). In addition, finally a completion 
signal is transmitted also at the time of transmission of this control program information. 
[0023] On the other hand, ECU10 receives the above-mentioned control program information transmitted 
from the personal computer 30, and writes it in the predetermined area of ROMB14 (flash memory) (step 

512) . in addition, it may degreet of capital ]write in, and whenever [ to receive ] it dies, a store is 
sufficient as a write-in method - carrying out -- all data — once — RAM12 - each time - having written in 

after the -■ all - data - simultaneous ROMB14 writing in — a method - ****** _ Moreover, it is 
desirable in this case to have composition as for which access for the writing of data is not made to the 
memory area (memory area **** of ROMA13) except the predetermined area of ROMB14 at all from the 
field of dependability. However, the mode which does not carry out prohibition of such access from 
viewpoints, such as cost reduction, is sufficient. Moreover, after write-in processing of this control 
program information, the information (for example, management number etc.) which shows that class 
and version if needed is written in the specific area of ROMB14. Subsequently, ECU10 returns the data of 
the written-in control program information to a personal computer 30, after receiving the 
above-mentioned completion signal and completing the above-mentioned write-in processing further (step 

513) . And it judges whether the personal computer 30 which received this return is carrying out full 
coincidence of the returned data as compared with the data transmitted previously, and when full 
coincidence is being carried out, O.K. signal is transmitted to ECU10 (step S14). Here, while transmitting 
the signal of a write error to ECU 10, for example and repeating processing again from step Sll noting 
that a write error (error 2) arises when data have not carried out full coincidence, that is displayed on a 
display 31 and reported (the lamp of the error 2 it is errorless from a field stellate as shown in drawing 1 
in this case is indicated by lighting). Moreover, ECU10 which received the signal of the above-mentioned 
write error performs the above-mentioned write-in preliminary treatment for example again, and will be 
in the state waiting for receiving of control program information here. Moreover, ECU 10 which received 
the above-mentioned O.K. signal performs processing set up as information which uses the control 
program information written in the predetermined area of ROMB14 with the priority to actual control, 
and returns from the condition for write-in actuation to the usual operating status after that. In addition, 
if the above-mentioned reconfirmation actuation (the above-mentioned steps S13 and S14) is reliable, it 
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may also have the mode omitted, of course. Moreover, there may also be the approach of controlling by the 
input switch which connected with the interface 15 of ECU10 as sensors 18, and prepared the write-in 
actuation which ECU 10 mentioned above (illustration abbreviation). Moreover, the switch (illustration 
abbreviation) which permits the write-in processing mentioned above may be formed as sensors 18. 
[0024] Moreover, the personal computer 30 which transmitted the above-mentioned O.K. signal to ECU10 
While carrying out automatic elimination for theft prevention of the control program information stored 
temporarily at internal RAM etc. Completion (lamp of write-in completion which consists of field stellate 
as shown in drawing 1 in this case is indicated, for example by fixed time amount lighting) processing of 
displaying on a display 31 that write-in actuation was completed, and reporting it is performed, and a 
series of processings are ended (step S15). However, processing (especially processing of automatic 
elimination of control program information) of this step S15 is not indispensable natural, and it cannot be 
overemphasized that there may also be a mode which does not perform such processing. It sets during the 
above-mentioned write-in actuation in this case. In addition, on a display 31 If a termination carbon 
button is displayed as shown in drawing 1 R> 1, and the operators (a dealer's serviceman etc.) of a 
personal computer 30 click this termination carbon button, write-in actuation will be stopped, the error 
situation (conditions, such as a collating inequality of authentication information, error 1, or error 2) 
mentioned above can be canceled - it is like (for example, an error situation is canceled and write-in 
actuation can be redone from the beginning). 

[0025] In the system of this example of a gestalt explained above, by write-in actuation mentioned above 
In the condition that ECU 10 which constitutes a mounted control unit was attached to the car The control 
program information downloaded from the server 2 through the communication network 1 The control 
program information which it is possible to write in the rewritable non- volatile storage means (ROMB14) 
formed in ECU 10 (for rewriting to be sufficient), and was written in this storage means, A mounted 
control unit is employed by the program information beforehand written in the remaining storage means 
(ROMA13) (in case the information on ROMA13 and the information on ROMB14 overlap or are 
contradictory in this case, it is used giving priority to the information on ROMB14). For this reason, it 
becomes possible to write in the control program as a finished product finally, or to rewrite it to the 
control program of the correction version, without removing and exchanging a mounted control unit, also 
after attaching a mounted control unit to a car. therefore, at the attachment time by the new car of the 
time of sale For example, only the primary control program which has only the basic function of necessary 
minimum [ the time ] is written in ROMA13. If the method of writing the control program of the perfect 
version in the predetermined area of ROMB14 in Diller just before selling initiation is adopted after 
shipping a car from a car manufacturer The development cycle of a control program is shortened 
substantially and it becomes possible to make the specification decision of a mounted control unit just 
before sale initiation more further. Moreover, even if fault is in a control program, it can respond cheap 
early easily by writing the control program information on the correction version in ROMB14 by said 
write in actuation. Moreover, if there is the need for the improvement in functional, it will become 
possible also for that by which overseas export was carried out even if after delivery after sale to user give 
[ which can carry out functional rise correspondence cheap early easily ] one's service by writing the 
control program information on the improvement version in functional in ROMB14 by said write-in 
actuation. Moreover, even if it becomes a used car, the newest function on control can be used by writing 
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the control program information on the latest edition in ROMB14 by said write-in actuation. Furthermore, 
in order not to exchange the hard components whose modification of the contents of control according to 
liking of a user is attained (it reuses), many practical advantages that it can contribute also to 
environmental preservation are acquired extremely. And in this system, since control program 
information writes in through a communication network 1 from a server 2 and a site is provided with it, it 
is not necessary to prepare the special equipment which offers control program information on the spot. 
For this reason, it can realize, without various kinds of advantages mentioned above producing human 
and the financial burden in Diller of a car etc. so much. 

[0026] Moreover, the personal computer 30 which constitutes the communications processing means of 
this invention starts said write-in actuation by initiation command actuation by the user behind 
powering on, and this system carries out. That is, a personal computer 30 is connected and started to 
ECU10 (mounted control unit) or a cellular phone (communication terminal), and if actuation (actuation 
which inputs authentication information in this case and clicks an initiation carbon button) of performing 
the predetermined program for write-in actuation is carried out, after that, said write-in actuation will be 
automatically carried out by this program for write-in actuation. For this reason, since a user only does 
easy initiation command actuation which was mentioned above, the write -operation of control program 
information becomes very easy, and the write-operation by the general user of him also becomes possible. 
[0027] Moreover, with this system, a personal computer 30 (communications processing means) is the 
input means (in this case) of authentication information (for example, put together as user ID and a 
personal identification number). Have the keyboard section 32 of a personal computer 30, and the input of 
authentication information is required of a user before said write-in actuation. Only when the result of 
the collating check based on the data of the authentication information beforehand registered into the 
storage means by the side of a mounted control device (ROMB14) is affirmative, said write-in actuation is 
carried out (when a collating check result is negative, said write-in actuation is not started). Furthermore, 
a personal computer 30 has the function to transmit the inputted authentication information 
automatically to a server 2 in said write-in actuation. On the other hand, a server 2 is based on the data of 
the authentication information beforehand registered into the storage means by the side of a server 2. 
The collating check of the received authentication information is performed, and only when the result of 
this collating check is affirmative, download of control program information is permitted (when a 
collating check result is negative, automatic transmission of control program information is not 
performed). Since the writing of control program information becomes impossible unless proper 
authentication information is inputted by this (the download of control program information itself 
becomes impossible in this case), it is contrary to volition, such as a user, and accidentally, control 
program information will be able to be rewritten, control program information will be able to be rewritten 
unjustly, or the fault for which control program information is plagiarized can prevent with high 
dependability. 

[0028] Moreover, in this system, a personal computer 30 sets in said write-in actuation, and it is a storage 
means by the side of a mounted control unit (in this case) beforehand. It has the function to transmit 
automatically the proper information on the mounted control device registered into ROMB14 (for 
example, model information, version information of a control program, etc.) to a server 2. On the other 
hand, a server 2 Said proper information is received and download is permitted only about the control 
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program information corresponding to said proper information among the control program information by 
which the multi-statement was carried out (when the Request to Send from a personal computer 30 is 
received). The control program information which is not equivalent to the received proper information is 
not transmitted automatically. For this reason, even when two or more sorts of control program 
information is assigned to one server 2 so that correspondence in two or more models of mounted control 
devices may be attained, there is an advantage which can avoid the fault in which the mistaken control 
program information will download and will be written with high dependability. 

[0029] Moreover, in this system, the basic actuation program and primary control program of ECU10 
(mounted control unit) are registered into the storage means (ROMA13) which cannot be accessed 
depending on said write-in actuation. For this reason, a trouble which becomes unusable to the basic 
function of a mounted control device by the error of said write-in actuation is certainly avoidable. Namely, 
even when the data of said predetermined memory area have been destroyed by the error of said write-in 
actuation, for example, minimum is possible for harnessing the basic function of a mounted control unit 
with said basic actuation program with which it registered with ROMA13 which cannot be accessed, and 
a primary control program. 

[0030] In addition, this invention is not restricted to the above-mentioned example of a gestalt, but as 
indicated in the column of The means for solving a technical problem,it may have various kinds of modes. 
For example, as shown in drawing 3 , all of the indicating equipment 41 corresponding to the 
above-mentioned display 31 or the keyboard section 32 and the actuation input device 42, a modem 43, a 
terminal 44 for connecting ECU 10 to a communication network 1, etc. can be installed as a car side 
facility (mounted control unit), and the communications processing means of this invention can also be 
constituted only from ECU10 (by facility existing to a car side). The store of control program information 
is attained without only taking separate equipment (equipment like the above-mentioned personal 
computer 30) to connect the terminal of the circuit for a cellular phone or fixed-line telephones to a 
terminal 44, if it does in this way. moreover, in a configuration as shown in drawing 1 or drawing 3 , the 
configuration which installs a fingerprint input unit as a facility by the side of a personal computer 30 or 
a car, inputs fingerprints, such as a user (or a personal identification number - adding), instead of a 
personal identification number, and is used as a part of authentication information at least may be used, 
moreover, about modification (functional rise etc.) and correction of the control program after car delivery 
download of a correction program is free possible for that the user itself becomes possible using a system 
which was mentioned above, and correction of fault " or That the download of various control programs 
which will realize the functional rise on control if an assignment tariff is transferred in advance and it 
applies for it is possible etc. Although a dealer's business manager may explain to a user orally or may 
indicate explanation to that effect to an operation manual For example, when the need for program 
correction arises, or when the version up version of a control program is completed, you may make it 
contact a user with a postcard, an electronic mail, etc. each time. 
[0031] 

[Effect of the Invention] According to this invention, in the condition that the mounted control unit was 
attached to the car, it is possible to write in a rewritable storage means by which the control program 
information received through the communication network was prepared in the mounted control unit (for 
rewriting to be sufficient), and a mounted control unit is employed for the control program information 
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written in this storage means. For this reason, it becomes possible to write in the control program as a 
finished product finally, or to rewrite it to the control program of the correction version, without removing 
and exchanging a mounted control unit, also after attaching a mounted control unit to a car. therefore, at 
the attachment time by the new car of the time of sale The control program of the provisional version or 
the control program which has only the basic function of necessary minimum [ the time ] is written in. For 
example, if the method of rewriting to the control program of the last version (or the perfect version) in 
Diller just before selling initiation is adopted after shipping a car from a car manufacturer The 
development cycle of a control program is shortened substantially and it becomes possible to make the 
specification decision of a mounted control unit just before sale initiation more further. Moreover, if there 
is the need for the improvement in functional which can respond cheap early easily even if fault is in a 
control program, even if it will become the used car whose user service is attain also after delivery after 
sale, in order not to exchange the hard components whose modification of the contents of control 
according to the liking of a user which can use the newest function on control is attain ( it reuses), many 
practical advantages that it can contribute also to environmental preservation are acquire extremely. 
[0032] And in this invention, control program information writes in through a communication network, 
and since it can provide for a site, it is not necessary to prepare the special equipment which offers control 
program information on the spot. For this reason, it can realize, without various kinds of advantages 
mentioned above producing human and the financial burden in Diller of a car etc. so much. In addition, 
the communications processing means which is needed on the spot in case this invention is carried out 
Even when it constitutes from equipment separate from a mounted control unit, as mentioned above 
Comparable [ as a commercial personal computer, a personal digital assistant, or them ] or it can 
constitute from a simple special-purpose machine not more than it (at least). It is easy to be a simple 
thing without the need of performing complicated processing which memorizes the control program 
information on a large number according to each model of mounted control unit, or generates the control 
program information which suits the specific model of mounted control unit. Moreover, when it 
constitutes the communications processing means of this invention only for mounted control unit itself, 
only by connecting a cellular phone etc. to a mounted control unit, the writing (it rewrites and contains) of 
control program information is attained, equipment with a separate personal computer etc. also becomes 
unnecessary, and it can realize very cheaply. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing l] It is drawing showing the example of a configuration of the operations system of a mounted 
control unit. 

[Drawing 2] It is the flow chart which shows the example of the operations system of a mounted control 
device of operation. 

[Drawing 3] It is drawing showing other examples of a configuration of the operations system of a 
mounted control unit. 
[Description of Notations] 
1 Communication Network 
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2 Server 

10 ECU (Body of Mounted Control Unit, Communications Processing Means) 
14 ROMB (Storage Means) 

30 Personal Computer (Communications Processing Means) 



* NOTICES * 

JPO and NCIPI are not responsible for any 
damages caused by the use of this translation. 

l.This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2 **** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 
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